Security
One instruction could give access to AWS AgentCore agent secrets
Zenity reports that AWS removed the permissions that gave this access. AWS does not agree that this is a vulnerability.
CyberSecurityNewsClaimed, not confirmed
Tag
AgentCore
3 stories carry this tag.
Security
One chat message gave Zenity control of all AgentCore agents
AWS made changes for part of the problem, and Zenity tells companies to give each agent a role with only the access it must have.
the-decoder.comClaimed, not confirmed
Security
The first AWS patch for AgentCore agents did not remove the risk
AWS corrected the default permissions of the agents between June 22 and September 29, Zenity wrote.
www.csoonline.comClaimed, not confirmed